Is it time to double down on red?

YouTube Music is great for avid watchers

Koshiro K/Shutterstock

YouTube Music has niche features you can’t get elsewhere

Irada Zaitova/Shutterstock

Swapping Spotify for YouTube Premium isn’t right for everyone

Tada Images/Shutterstock

SpaceX’s historic IPO just got super-sized, after the public offering’s underwriters exercised their option to purchase the maximum amount of shares — bringing the total amount raised to $85.7 billion.

Elon Musk’s space-and-AI company had initially raised $75 billion, which was already enough to make it the largest IPO windfall ever.

SpaceX has said it plans to use the proceeds from this IPO in a variety of ways. The company plans to extinguish around $20 billion in debt related to legacy loans tied to X, the social media company formerly known as Twitter, and Musk’s AI company xAI — both of which were combined into SpaceX before the IPO.

Funds will also be used to expand SpaceX’s AI compute infrastructure, enhance its launch infrastructure, and improve Starlink.

SpaceX’s stock started trading on the Nasdaq exchange on Friday. The company finished the day with a valuation of more than $2 trillion, and Musk became the world’s first trillionaire. Shares climbed higher on Monday, helping SpaceX eclipse the valuation of chipmaker TSMC.

Salesforce acquires Fin, the customer-service AI company formerly known as Intercom, in a deal worth about $3.6bn. The CRM giant signed a definitive agreement on Monday, it said, to fold Fin’s “customer agent” technology into Agentforce, its own fast-growing AI-agent platform.

Fin’s pitch is autonomous support.

Its AI Agent handles customer queries end-to-end across live chat, email, WhatsApp, SMS, phone and Slack, and Salesforce says it resolves, on average, 76 per cent of support volume without a human. It runs on Fin’s own model, Apex, which the company says it post-trained specifically for support and which it claims outperforms frontier models from OpenAI and Anthropic on resolution.

Fin brings more than 30,000 business customers with it.

The deal is expected to close in the fourth quarter of Salesforce’s fiscal 2027, subject to regulatory clearance. Salesforce says it will not change its FY2027 guidance or its buyback plans.

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol’ founder Boris, and some questionable AI art. It’s free, every week, in your inbox. Sign up now!

Why Salesforce acquires Fin instead of out-building it

Salesforce is not short of agents. Agentforce, its own platform, hit $1.2bn in annual recurring revenue in the first quarter, up 205 per cent year on year. So this is not a company filling a hole. It is buying speed.

Agentforce is the deeply customisable, enterprise-grade option, powerful but slower to stand up. Fin is the opposite: packaged, pre-trained and live in days, which suits smaller and mid-market firms that want a working support agent now. Buying Fin lets Salesforce sell both, from a drop-in support bot to a bespoke enterprise build, rather than forcing every customer down the heavyweight path.

“We’ll help companies of every size seize this opportunity,” chief executive Marc Benioff said.

A rival, and its own model, absorbed

The target is a pointed one. Fin, under co-founder and chief executive Eoghan McCabe, has spent years positioning itself as the company that defined the customer-agent category, often at the industry’s expense.

Intercom only renamed itself Fin, after its AI agent, in May. Now the agent, the brand and the team are Salesforce’s. “We can deploy it far and wide at a rate far faster than we could have ever achieved on our own,” McCabe said.

There is a quieter prize, too. Fin launched in 2023 on OpenAI’s GPT-4 and later leaned on Anthropic’s Claude, then built Apex, its own post-trained support model, to cut that dependence. Salesforce is buying not just an app but a proprietary model tuned for one job. It slots into a wider land-grab in agentic AI, where the big platforms are racing to own the software that does the work, not just the software people work in.

The test now is integration: whether a packaged agent built outside Salesforce still feels fast once it is wired into Salesforce’s data, security and governance stack.

Presented by Splunk

AI has changed the economics of cyber deception.

An attacker can now generate thousands of convincing phishing lures, fake identities, and tailored pretexts before a defender finishes a single change-control cycle. That is the new security challenge: deception got faster and cheaper, while verification did not.

Much of the discussion around AI for defense centers on detection models. Detection matters, but it is not the only bottleneck. The deeper constraint is evidence: where data lives, whether it is available when needed, how quickly it can be correlated, how long it is retained, and whether analysts or agents can trust what they retrieve.

Defense in the AI era is a data problem before it is a detection problem.

The defender’s advantage is truth

Attackers can afford to lie at enterprise scale. They can test endless combinations of messages, identities, domains, and attack paths, and most can fail at almost no cost.

Defenders do not have that luxury. Their advantage is truth: quickly knowing what happened, where, when, which identity was involved, which assets were affected, what changed, and what business process may be at risk.

That truth must be documented, governed, auditable, and defensible. Attackers are using AI to scale deception, impersonation, social engineering, and speed. Defenders need AI to scale verification.

The goal is not just to act faster than the attacker. It is to take action that people and machines can trust.

Fragmented data breaks modern defense

Consider a suspicious login from a contractor account. On its own, it is just another authentication anomaly. To know whether it matters, a security team may need identity history, endpoint activity, cloud access logs, ticketing records, asset ownership, configuration changes, network telemetry, and business context.

If those records sit in different tools, expire at different times, or require multiple teams to retrieve, defenders are not investigating the incident. They are negotiating with their own data estate.

When signals can be reached in place and correlated quickly, the issue is no longer just whether the login looks unusual. It becomes whether the enterprise has enough evidence, in enough context, to take action it can defend.

That challenge grows more urgent with AI assistants and agents. AI can only reason over what it can retrieve in time to matter. If the data is partial, stale, fragmented, unavailable, or stripped of context, AI does not create truth. It accelerates uncertainty.

The system of record must become a defensive control plane

For years, enterprises treated security platforms, SIEMs, and data lakes as passive repositories: places to store data for later search and analysis. That model is no longer enough.

What organizations now need is a defensive control plane: a layer that connects what happened, what it means, and what the enterprise is allowed to do about it. In architectural terms, it ties together raw machine data, business context, and policy. It does not just store evidence. It makes evidence usable for decisions and actions that must be explainable and trusted.

In practice, that means doing four things well: preserving evidence, reaching data wherever it lives, adding business context, and governing action. More on each below.

The old system of record answered one question: What is the official record?

A defensive control plane answers the questions that matter operationally: What happened? What does it mean? What evidence supports that conclusion? And what action can we trust?

AI does not reduce the need for authoritative records. It raises the standard for what those records must do.

A defensive control plane must do four things

1. Preserve evidence. Logs, metrics, traces, events, identity records, configuration changes, tickets, and asset state all help establish what happened. Their value often becomes clear only after an incident begins.

2. Make data accessible wherever it lives. Security-relevant data is already spread across object stores, cloud platforms, operational tools, and business systems. Moving every byte into one place is often too slow, too expensive, and too difficult to govern. The better model is to bring analytics to the data.

3. Add business context. Correlating machine data with business information turns “anomaly on host X” into “the system supporting payment services for top accounts is being probed.” That is what allows organizations to prioritize correctly.

4. Govern action. In the agentic era, systems will do more than summarize incidents. They will enrich alerts, open cases, trigger workflows, isolate assets, update policies, and escalate decisions. Enterprises need to know what evidence an agent used, what policy governed the action, whether it stayed within scope, and how the decision can be reviewed afterward.

The real SOC problem is not too little data

Modern SOCs are not suffering from a lack of data. They are suffering from a lack of usable context.

According to the Splunk State of Security 2025 report, SOC analysts continue to struggle with too many alerts (59%), too many false positives (55%), and alerts that lack context (46%). The issue is not data volume. It is the difficulty of turning fragmented signals into trusted decisions.

Today, analysts are left stitching together context manually, pivoting across disconnected tools, and making high-stakes decisions without the full picture in time. Even as AI improves, outcomes still depend on whether humans are willing to approve changes across fragmented environments.

This creates a daily crisis of context. Teams are forced to make consequential decisions based on data they cannot easily see, correlate, or trust. The result is latency, inconsistency, missed opportunities, and unnecessary risk.

Trusted action is the durable advantage

A data fabric architecture offers a way forward by creating a unified, intelligent layer across data sources spanning SecOps, ITOps, and NetOps. The goal is not centralization for its own sake. It is to break down silos and deliver context-rich insight at the speed AI-driven operations require.

This is an operating model before it is a product. AI-driven defense depends on a foundation that can preserve evidence, reach data where it lives, add context, and maintain a reviewable link between data, decision, and action. That is the architectural shift behind Cisco Data Fabric powered by the Splunk Platform, which brings together machine data, federation, business context, governance, and provenance to help teams move from signal to trusted action.

Attackers will keep making deception cheaper, faster, and more personalized. Defenders do not win that race by generating more noise. They win by making truth faster, and by grounding every action in evidence that people and machines can trust.

Learn more about the Cisco Data Fabric powered by the Splunk Platform.

Seth Brickman is VP, Global Product – Splunk Platform, Cisco.

Sponsored articles are content produced by a company that is either paying for the post or has a business relationship with VentureBeat, and they’re always clearly marked. For more information, contact sales@venturebeat.com.

Samsung’s next foldable line-up may have just leaked ahead of schedule. A new image appears to show screen protectors for the upcoming Galaxy Z Flip 8, Galaxy Z Fold 8 and Galaxy Z Fold 8 Ultra side by side.

While leaked screen protectors aren’t usually the most exciting reveal, this one offers an early look at how Samsung could be reshaping its foldable range.

Most notably, the Galaxy Z Fold 8 appears wider and slightly shorter than previous models. Meanwhile, the Fold 8 Ultra looks set to sit in a class of its own.

If the leak is accurate, it suggests Samsung is putting more distance between its standard Fold and Ultra models. The company may no longer treat the Ultra as a simple spec bump. That could help the company better compete. After all, rivals such as Apple, Xiaomi and Vivo continue to push into the foldable market.

AI AND ml

PwC says AI hiring jumped 61 percent despite wider slowdown in vacancies, with employers increasingly looking for workers who can use AI rather than build it

Britain’s AI jobs boom is creating a two-track labor market, according to PwC, which just so happens to make a healthy living helping companies navigate AI-driven transformation.

The consulting giant’s latest AI Jobs Barometer found hiring for AI specialists in the UK jumped 61 percent over the past year, rising from 112,000 roles in 2024 to 180,000 in 2025, even as overall job vacancies across the economy fell by 6.6 percent.

That headline figure is the sort of thing consultancies put in press releases, but the more interesting bit comes later.

PwC’s analysis suggests employers aren’t rushing to hire hordes of machine learning engineers and model builders. Instead, they’re increasingly looking for people who can use AI inside existing professions and business functions. The firm found that so-called AI user roles grew by almost 66,000 positions during the year, while AI developer roles increased by just 2,600.

After years of declaring that AI will revolutionize everything from accounting to sandwich-making, companies appear to have reached the awkward stage where somebody actually must make the technology useful.

PwC argues the result is a “two-track” labor market. Jobs where AI helps skilled workers automate repetitive tasks and focus on higher-value work are growing faster than roles where the technology mainly makes tasks easier and lowers barriers to entry.

According to the report, roles most enhanced by AI have grown by 39 percent since 2018, compared with 17 percent growth in jobs where AI is primarily simplifying work.

The firm’s wage data tells a similar story. Jobs requiring AI skills now command an average wage premium of 34.2 percent, up from 11 percent a year ago. Consumer market companies are offering premiums as high as 64 percent, while government and public sector employers top out at 12 percent.

That’s certainly good news for workers with AI skills. It’s also not the sort of conclusion likely to upset a firm that advises clients on AI strategy for a living.

The findings land against a backdrop of growing anxiety about AI’s impact on employment. Recent polling found one in five Britons believes AI-driven layoffs could eventually trigger civil unrest, while another survey found that office workers are already spending nearly six hours every week checking, correcting, or redoing work generated by AI tools.

For all the excitement around AI, the hiring surge appears to be concentrated in a surprisingly old-fashioned category: people who know what they’re doing. ®

SOFTWARE

Linux app packaging rethink could leave alternative-init distros in the cold

Flatpak development has been very quiet for years. Discussions about a next-generation take are happening – and some of the signs are worrying if, like many FOSS folks, you are systemd-intolerant.

In the course of researching our article on MX Linux 25.2, we came across an interesting Reddit discussion from last month, which in turn led us to a Flatpak development blog post from late last year.

It looks like a team is collecting ideas for what is currently called “Flatpak-NG” – as in next generation. If this solidifies into code, this may form the basis of Flatpak version 2.

The blog post isn’t very informative, but the Reddit thread links to the video of a presentation from last month’s Linux App Summit in Berlin, which spells things out more clearly.

The Flatpak-NG idea involves handing off a lot of the isolation in Flatpak from the current bubblewrap layer to an as-yet-unwritten systemd component that the developers are currently calling systemd-appd. This would considerably simplify Flatpak, and enable it to do more isolation, including virtualizing the network stack – but at the price of making Flatpak 2 depend on systemd. A developer who was at the talk, Jorge Castro, later explained and confirmed this in a Fediverse thread.

The teams behind other init systems could, of course, write their own replacement for the notional systemd-appd, but that would be a substantial amount of work. The tool that provides the new init-switching functionality in MX Linux 25.1 and 25.2, init-diversity, currently supports six other init systems besides systemd, and we’ve seen little sign of them cooperating to create an alternative to systemd that provides even a subset of its wider functionality.

Flatpak is widely used and supported. Not all distros include it by default, but it’s the only widely adopted alternative to Canonical’s Snap packaging system.

Snap is more versatile: it works fine with shell programs, and even the kernel can be packaged as a Snap, which is how Ubuntu Core handles it. Snap’s implementation is much simpler and cleaner than Flatpak’s, as is the distribution model – which, as we’ve reported before, is entirely open source. The only proprietary part is Canonical’s Snap Store website. The trouble is, the louder advocates in the peanut gallery rarely even think about things like implementation details; they just get upset about more visible things that are easier to understand – such as who owns a website.

There are other alternatives out there, such as AppImage, 0install, AppDir, and GNUstep’s implementation of NeXT and Apple’s .app format. We have compared these in detail before.

Only two really have wide adoption, though. There’s Snap, which Canonical claims has more users simply because Ubuntu has more users than all the other desktop distros put together, and there’s Flatpak, which is used by every other distro with any kind of cross-distro package support.

The snag is, if Flatpak 2 does arrive in a year or two, and requires systemd, then that could spell the end of Flatpak support on many systemd-free distros. That includes MX Linux, Alpine Linux, Devuan, Slackware, and many other smaller projects. For many of these, Flatpak is a lifeline: the only way to access much of the wider Linux app market.

It’s not so much that the Flatpak-NG team is the “A-Team,” but the only team. In the original A-Team, Colonel John “Hannibal” Smith was wont to say “I love it when a plan comes together.” We suspect a lot of people will not love it if this plan comes together. ®

According to the companies, it would create the third-largest player in US TV.